Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: 1SBkvV1+EtweMdYCDQh3M0mOPBDY2wc/8MuONraqAk0=
Subject key identifier: 43:C3:7E:73:88:75:C3:1D:54:04:59:BB:F8:9B:F8:5D:24:1F:9E:0E
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 0194BD4E7C3C5084DC4DEA8166B1F53D37D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: 6Qk7c1VLO4hgsAX2jO9YXCVUZOPVwp6HZvmlKv6Lr4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:3c:50:84:dc:4d:ea:81:66:b1:f5:3d:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=43c37e738875c31d540459bbf89bf85d241f9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2a:2b:cb:71:1f:5f:bb:35:b2:71:e0:29:ac:
5d:5d:e3:f8:37:0a:cc:4f:56:69:59:a6:1f:ea:38:
84:5d:e9:d0:e0:86:a6:89:44:a2:fb:d8:e7:ff:17:
52:96:20:9a:b0:c2:bf:31:a8:d2:15:13:61:66:b2:
60:8f:c5:00:a0:ac:65:db:13:a0:02:e7:b8:13:49:
7b:23:2e:38:c1:2f:ee:f9:91:c5:81:05:a6:1e:00:
ea:3a:d7:13:c1:c8:a3:09:ef:8d:26:0e:12:a6:04:
fc:09:1f:e8:a9:dd:22:bb:a3:89:11:38:68:fe:3b:
d8:c2:65:d5:62:e5:ca:ff:12:7f:8b:1b:54:0c:bf:
a8:8f:f1:81:6e:68:9d:59:37:eb:f7:c9:93:69:47:
a3:ae:1b:03:84:62:6a:58:c6:00:ca:55:c5:9e:92:
a4:ad:7a:f6:0c:fd:8d:cf:44:9a:2b:8e:37:72:7e:
54:cf:5f:39:ad:b3:9f:96:78:21:b6:eb:fa:9a:9c:
08:b2:6b:e3:93:c4:33:80:3a:8a:fa:a6:89:0f:e3:
df:63:c8:c6:c3:7f:e8:62:ba:6f:c8:ca:98:3b:b0:
57:ba:2c:13:20:7a:5a:d0:10:4f:dc:1b:db:a4:06:
68:9a:0d:e7:39:ff:2d:71:b8:6a:f2:a9:57:9f:ae:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C3:7E:73:88:75:C3:1D:54:04:59:BB:F8:9B:F8:5D:24:1F:9E:0E
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:da:18:7b:0d:76:14:92:fa:55:b1:37:c8:89:82:66:9c:
c8:bc:d2:01:db:9b:ca:df:36:f2:01:8f:ad:10:37:0e:c4:17:
fa:3d:45:15:04:8d:d2:72:52:2b:0a:87:9a:a8:56:2d:c2:d2:
b4:b7:73:f8:aa:ad:35:82:e9:0f:80:9a:4c:94:72:8a:c8:55:
ac:68:3a:6d:e1:e2:a5:1c:73:e9:67:88:85:34:fa:d1:f8:40:
2f:9d:76:56:5a:ab:3f:26:3b:e8:71:20:5e:d2:73:ff:02:58:
26:58:f5:88:c3:c5:5e:22:d1:ad:88:33:be:b2:75:b8:28:88:
78:19:c8:87:52:d1:22:6a:68:04:f3:49:62:5f:35:13:8d:af:
a8:b5:b0:c4:9e:89:db:6b:7c:6c:85:51:20:0d:02:94:c1:92:
42:b7:09:6f:60:57:6d:c6:ae:72:0b:f0:81:42:36:e1:ce:bf:
82:3c:13:1e:4f:aa:ec:79:09:04:80:a5:7d:73:e3:25:4f:63:
f0:de:e3:d4:4d:a6:e7:a1:98:35:75:87:26:e8:23:31:3a:e3:
31:69:83:f0:f5:2d:f3:af:46:2b:83:2e:ea:dd:1e:0a:14:e9:
01:0a:95:ed:e0:74:9a:6a:7e:57:2e:9d:bf:78:ef:74:52:f2:
2e:68:ee:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tnw8UITcTeqBZrH1PTfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MzI5YWFlMDJiMzY2ZWQxYTAxYjUyYWMzM2FiZTc2MDU5
M2E4MDYwHhcNMjUwMTMxMTcwMDI0WhcNMjUwMjAxMTcwMDI0WjAzMTEwLwYDVQQD
Eyg0M2MzN2U3Mzg4NzVjMzFkNTQwNDU5YmJmODliZjg1ZDI0MWY5ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Sory3EfX7s1snHgKaxdXeP4NwrM
T1ZpWaYf6jiEXenQ4IamiUSi+9jn/xdSliCasMK/MajSFRNhZrJgj8UAoKxl2xOg
Aue4E0l7Iy44wS/u+ZHFgQWmHgDqOtcTwcijCe+NJg4SpgT8CR/oqd0iu6OJETho
/jvYwmXVYuXK/xJ/ixtUDL+oj/GBbmidWTfr98mTaUejrhsDhGJqWMYAylXFnpKk
rXr2DP2Nz0SaK443cn5Uz185rbOflnghtuv6mpwIsmvjk8QzgDqK+qaJD+PfY8jG
w3/oYrpvyMqYO7BXuiwTIHpa0BBP3BvbpAZomg3nOf8tcbhq8qlXn667TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPDfnOIdcMdVARZu/ib+F0kH54OMB8GA1UdIwQY
MBaAFJYymq4Cs2btGgG1KsM6vnYFk6gGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMt
YWU5M2RlZjUxMGMyLzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xNGJjYTUtOTA0Ni00ODc2LTgyODMtYWU5M2RlZjUxMGMy
LzEvbGpLYXJnS3padTBhQWJVcXd6cS1kZ1dUcUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9faGHsN
dhSS+lWxN8iJgmacyLzSAdubyt828gGPrRA3DsQX+j1FFQSN0nJSKwqHmqhWLcLS
tLdz+KqtNYLpD4CaTJRyishVrGg6beHipRxz6WeIhTT60fhAL512VlqrPyY76HEg
XtJz/wJYJlj1iMPFXiLRrYgzvrJ1uCiIeBnIh1LRImpoBPNJYl81E42vqLWwxJ6J
22t8bIVRIA0ClMGSQrcJb2BXbcaucgvwgUI24c6/gjwTHk+q7HkJBIClfXPjJU9j
8N7j1E2m56GYNXWHJugjMTrjMWmD8PUt869GK4Mu6t0eChTpAQqV7eB0mmp+Vy6d
v3jvdFLyLmjuyA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:32 2025 by rpki-client